v3.4 v0.4.2
bespokelabsai/nimbleAug 15, 2021 → Sep 13, 202128 days between releases
What's New
Adds CSV injection security fix, raw request support, and multiple authentication types.
New Features
- Support for raw requests and URLs from STDIN
- Multiple authentication types
- HTML report format
- Configuration options for max runtime and request rate
- Recursion on specified status codes
Improvements
- Enhanced accuracy
- Security fix for CSV Injection vulnerability
- Support for default URL scheme
- Deep/forced recursive scan
- Option to skip target by specified status codes
Bug Fixes
- Fixed CSV Injection vulnerability
- General bug fixes
Upgrade Notes
The update introduces new CLI options for raw requests and STDIN input, as well as new configuration parameters for max runtime and request rate. Ensure your configuration files are updated to include these new settings if you rely on custom limits. The CSV injection vulnerability fix is a security update that requires no action other than upgrading.
The Two Releases
v3.4
Aug 15, 2021· 5 years ago
Minimal release notes: "Release notes: https://www.spiderfoot.net/spiderfoot-3-4-open-source-release/"
Full release notesv0.4.2
Sep 13, 2021· 5 years ago
This update enhances accuracy and security, adding features like URL injection from STDIN, raw request support, and various authentication types, while fixing a CSV injection vulnerability.
Full release notes